When it comes to blackbox pentesting of a wordpress site ,first thing come's in your mind is WPScan[\[http://wpscan.org/\]][1].While pentesting through some site's ,i faced a similar issue i.e it shows that Wordpress SEO 1.14.15 is vulnerable to Cross Site Scripting Attack. Output is given below
 
 | * Title: WordPress SEO 1.14.15 - index.php s Parameter Reflected XSS
 
 | * Reference: [http://packetstormsecurity.com/files/123028/][2]
 
 | * Reference: http://osvdb.org/97885

But when following the link [http://packetstormsecurity.com/files/123028/][3] ,it shows that attack can be executed with 

![Yoast Wordpress SEO XSS][4]

But the main problem is when i tried to inject several xss vector's ,result's were not positive .I was not able to find any XSS in above url.There is proper output encoding ,a snapshot is shown below![wordpress search xss][5] .So my question is "Do you have any method to bypass this and execute an xss " and "Do you any other tool or resources through which i can do better blackbox testing of wordpress"


  [1]: http://wpscan.org/
  [2]: http://packetstormsecurity.com/files/123028/
  [3]: http://packetstormsecurity.com/files/123028/
  [4]: https://i.sstatic.net/MwlJf.png
  [5]: https://i.sstatic.net/qLPHS.png